Common Weakness Enumeration

    CWE Definition / CWE-943

    CWE-943: Improper Neutralization of Special Elements in Data Query Logic

    The product generates a query intended to access or manipulate data in a data store such as a database, but it does not neutralize or incorrectly neutralizes special elements that can modify the intended logic of the query.

    Published:19 Jun 2014
    Organization:MITRE
    Modified:11 Dec 2025

    Related Weakness

    CWE-74: Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')